ChessPigeonPrivacy Policy
Summary
- Reviews run on your device. Stockfish runs inside your browser; analyzing a game does not upload it.
- Saved games stay in your browser unless you share a link, download a file or bring a game into a lesson.
- Lessons and online games are temporary. They pass through our servers so participants can see the same board, and are deleted after a limited time.
Who is responsible
ChessPigeon is operated by an individual operating as ChessPigeon, based in Poland, who is responsible for the personal data described here. You can reach the operator at support@chesspigeon.app.
Cookies and storage on your device
ChessPigeon stores the following information on your device to provide its features. You can remove it by clearing this site's data in your browser settings; note that this also deletes games saved only on this device.
| Information | Purpose | Kept for |
|---|---|---|
| Settings, game choices, last searched Chess.com username and previous app visits | Remembering your preferences | Until you change them or clear site data |
| Your open game and review | Restoring your work after a reload | Until the tab is closed |
| Lesson or online-game access details | Keeping you in the lesson or game after a reload | Until the tab is closed or you leave |
| Saved and imported games | Your game library | Until you delete them or clear site data |
| Recent reviews | Reopening reviewed games | Until replaced by newer reviews |
| Sign-in cookies | Keeping an existing account signed in | Up to 400 days, only if signed in |
Sign-in is not currently offered in the app, so new visitors receive no cookies from ChessPigeon. The analytics described under Service providers and data processing do not set cookies or store identifiers through ChessPigeon's code.
Analysis, saved games and share links
Engine analysis happens entirely in your browser. Imported and saved games are kept in the browser storage listed above and are not uploaded.
A share link contains the game, its variations and review without uploading them to ChessPigeon. Anyone with the link can open it; the shared copy remains in the link.
Classroom lessons
A lesson is shared between its participants through our servers. While a lesson exists, the server stores:
- participants' display names, roles, permissions and recent activity;
- the lesson games, moves, variations, arrows and highlights;
- chat messages with the sender's name and time (only the most recent 100 are kept), raised hands and the lesson timer;
- engine results the coach chooses to show;
- information needed to manage invitations and participant access.
Lessons expire six hours after creation and are then removed during routine cleanup. They are not linked to accounts. Games you save from a lesson go to your own browser library.
Online games
Games against the computer run entirely in your browser. Games with a friend go through our servers so both players see every move. We store player identities and display names, moves, clocks, results, connection status and information needed to manage invitations and game access.
Unaccepted invitations expire after 10 minutes and finished games after 24 hours. See How long data is kept for every period. Removal happens during routine cleanup after expiry.
Accounts
New accounts are not currently available. For existing accounts, we use the sign-in email, optional Chess.com username, saved games and their source and dates to provide the account and library. We also keep records of game deletions so they apply across devices. Our sign-in provider handles passwords. Contact us by email to delete an account and its library.
Chess.com imports
Searching sends the username you enter to Chess.com to retrieve public games. Your IP address is not forwarded with the search. Retrieved profiles may be kept for about a minute and older game collections for up to a day. Your last searched username is remembered on your device.
Loading player avatars shares your IP address and the ChessPigeon site address with Chess.com's image service.
Service providers and data processing
Vercel processes IP addresses and request data to host and protect the site, and page addresses, browser and device information to measure visits and performance. Upstash processes short-lived identifiers derived from IP addresses to prevent abuse.
Supabase stores lesson, online-game and account data and supports sign-in and live updates. Chess.com supplies requested game imports and avatars, as described above.
Vercel and Upstash process data in the United States; our Supabase database is in the European Union. Transfers outside the European Economic Area are international transfers under the EU General Data Protection Regulation (GDPR). The applicable transfer safeguards depend on the provider and service used.
How long data is kept
- Lessons: expire six hours after creation and are deleted during routine cleanup.
- Online play: finished games stay for 24 hours; active games and rejoining access for up to seven days; player identities for 30 days.
- Temporary data: unused game invitations and abuse-prevention records stay for up to 10 minutes.
- Account libraries: until you delete the game or account. Deletion records are eligible for removal after 30 days.
- Browser data: see the storage periods above; you can also delete it or clear site data.
Children and students
Classroom asks only for a display name and needs no email or account. Coaches who invite children are responsible for obtaining any permission required where they teach, and we recommend that students use a first name or nickname. You must be at least 13 to use ChessPigeon on your own. Children under 13 should only join lessons set up by a coach, teacher or parent who has any consent required.
Your choices and rights
- Browser data: delete individual games in My games, or clear this site's data in your browser to remove everything stored on your device.
- Lessons: leaving a lesson marks you as having left; it does not immediately erase your participant record or messages. Lesson data is removed during clean-up after expiry.
- Requests: you can ask for access to, correction of or deletion of personal data held on our servers by writing to the contact address below. Lesson and game records use display names and random identifiers rather than verified identities, so tell us enough to locate them, for example the lesson name and time.
- Legal basis and complaints: we run lessons, online games and imports because you ask for them (to provide the service), and keep abuse-protection counters and privacy-minded analytics because we have a legitimate interest in keeping ChessPigeon safe and working well. If you are unhappy with how we handle your data, you can complain to the President of Poland's Personal Data Protection Office (UODO) or to the competent data protection authority where you live or work, or where an alleged infringement occurred.
Changes to this policy
When ChessPigeon changes how it handles data, this page is updated and the date at the top changes.
Contact
Questions about privacy: support@chesspigeon.app with the subject “Privacy request”. See Support for what to include.